📦
web-search
70Search and Extract Web Research
Research tasks need current sources and clean page text. This skill routes Claude, Codex, and Claude Code requests through Tavily and Exa using the belt CLI.
Research & Learning View
Skills twitter-automation
📦
twitter-automation
Content revision r1 Medium Risk ⚙️ External commands🌐 Network access
Automate Twitter and X Workflows
Social teams need reliable X actions without rewriting command syntax. This skill turns common Twitter/X tasks into guided belt CLI workflows.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "twitter-automation" from https://skillstore.io/skills/qu-skills-twitter-automation.md and its manifest at https://skillstore.io/api/skills/qu-skills-twitter-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "twitter-automation". Post a short launch announcement for a new analytics dashboard.
Expected outcome:
Draft post prepared. The workflow asks for approval before posting through the authenticated X account.
Using "twitter-automation". Like and retweet one approved partner announcement.
Expected outcome:
The workflow confirms the target post first, then reports the like and retweet results after approval.
Using "twitter-automation". Delete an accidental tweet by ID.
Expected outcome:
The workflow requests final confirmation because deletion is irreversible, then summarizes the deletion result.
Security Audit
Medium Riskv4 • 7/5/2026 Open versioned report
Most backtick findings are Markdown formatting, but several examples intentionally run belt or npx commands. No prompt injection was found, but the skill has real side effects through X account automation.
1
Files scanned
158
Lines analyzed
16
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Automated Social Media Action Abuse
The skill supports posting, liking, retweeting, sending direct messages, and following users. These actions can enable spam or unwanted engagement without controls.
The capability list and examples directly include DM and follow operations. The file does not include approval, rate-limit, or recipient validation guidance.
Capability review items (16)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
> **Install the belt CLI skill:** `npx skills add belt-sh/cli`
The inline text tells users to run `npx skills add belt-sh/cli`. That can fetch and install external skill code if followed.
Medium
Ruby/shell backtick execution
```bash
This block includes `belt login` and a `belt app run` command. It can post through an authenticated X account.
Medium
Ruby/shell backtick execution
```bash
This block runs `belt app run x/post-tweet`. It can publish content through an authenticated X account.
Medium
Ruby/shell backtick execution
```bash
This block runs `belt app sample` and `belt app run x/post-create`. It can create a media post through the external service.
Medium
Ruby/shell backtick execution
```bash
This block invokes `belt app run x/post-like`. It can change account engagement state on X.
Medium
Ruby/shell backtick execution
```bash
This block invokes `belt app run x/post-retweet`. It can amplify a post from the authenticated X account.
Medium
Ruby/shell backtick execution
```bash
This block invokes `belt app run x/dm-send`. It can send direct messages from the authenticated account.
Medium
Ruby/shell backtick execution
```bash
This block invokes `belt app run x/user-follow`. It can follow a user from the authenticated account.
Medium
Ruby/shell backtick execution
```bash
This block invokes `belt app run x/user-get`. It performs an external account lookup through the CLI.
Medium
Ruby/shell backtick execution
```bash
This block invokes `belt app run x/post-get`. It performs an external post lookup through the CLI.
Medium
Ruby/shell backtick execution
```bash
This block invokes `belt app run x/post-delete`. It can delete a post from the authenticated account.
Medium
Ruby/shell backtick execution
```bash
This workflow runs media generation and Twitter posting commands through `belt`. It writes local output and posts external media.
Medium
Ruby/shell backtick execution
```bash
This workflow runs video generation and Twitter posting commands through `belt`. It writes local output and posts external media.
Medium
Ruby/shell backtick execution
```bash
This block lists `npx skills add` commands for related skills. Running them can install additional unreviewed code or instructions.
Low
Hardcoded URL
. [Install instructions](https://raw.githubusercontent.com/infer
The install instructions link uses a raw GitHub URL on the main branch. Following it fetches remote instructions.
Risk Factors
⚙️ External commands (37)
SKILL.md:7 SKILL.md:17 SKILL.md:19-24 SKILL.md:24-31 SKILL.md:31-32 SKILL.md:32-33 SKILL.md:33-34 SKILL.md:34-35 SKILL.md:35-36 SKILL.md:36-37 SKILL.md:37-38 SKILL.md:38-39 SKILL.md:39-45 SKILL.md:45-47 SKILL.md:47-51 SKILL.md:51-61 SKILL.md:61-65 SKILL.md:65-67 SKILL.md:67-71 SKILL.md:71-73 SKILL.md:73-77 SKILL.md:77-82 SKILL.md:82-86 SKILL.md:86-88 SKILL.md:88-92 SKILL.md:92-94 SKILL.md:94-98 SKILL.md:98-100 SKILL.md:100-104 SKILL.md:104-106 SKILL.md:106-110 SKILL.md:110-119 SKILL.md:119-123 SKILL.md:123-132 SKILL.md:132-136 SKILL.md:136-148 SKILL.md:148-150
🌐 Network access (7)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/qu-skills-twitter-automation/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/qu-skills-twitter-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/qu-skills-twitter-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/qu-skills-twitter-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/qu-skills-twitter-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
qu-skills. (2026). twitter-automation security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/qu-skills-twitter-automation/audits/4BibTeX citation
@techreport{qu-skills-qu-skills-twitter-automation-2026,
author = {qu-skills},
title = {twitter-automation security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/qu-skills-twitter-automation/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "twitter-automation security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "qu-skills"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/qu-skills-twitter-automation/audits/4"
identifiers:
- type: other
value: "skillstore:qu-skills-twitter-automation:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
16 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
sickn33 Recommended
sickn33-twitter-automation
Skillstore Score 70
Evidence Confidence High
Skillstore usage 7
Updated
2026-08-21
inferen-sh-twitter-automation
Skillstore Score 69
Evidence Confidence High
Skillstore usage 8
Updated
2026-08-21
skillssh-twitter-automation
Skillstore Score 50
Evidence Confidence High
Skillstore usage 8
Updated
2026-08-21
infsh-skills-twitter-automation
Skillstore Score 50
Evidence Confidence High
Skillstore usage 7
Updated
2026-08-21
skills-shell-twitter-automation
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 5
Updated
2026-08-21
101-skills-twitter-automation
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 5
Updated
2026-08-21
qu-skills Current
qu-skills-twitter-automation
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 4
Updated
2026-08-21
tul-sh-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated
2026-08-21
toolshell-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 11
Updated
2026-08-21
inference-sh-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated
2026-08-21
inference-shell-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated
2026-08-21
inference-sh-8-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated
2026-08-21
halt-catch-fire-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated
2026-08-21
inference-skills-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated
2026-08-21
inference-sh-skills-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated
2026-08-21
inference-sh-9-twitter-automation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 4
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
67
Community
83
Spec Compliance
What You Can Build
Launch Product Updates
Prepare and publish approved X posts for product news, releases, or event announcements.
Manage Creator Posts
Create posts with generated media and review engagement actions before publishing.
Test X Integration Flows
Run controlled post, profile, DM, and deletion checks during integration testing.
Try These Prompts
Post a Simple Update
Use the twitter-automation skill to prepare this X update: [message]. Show the final action and wait for approval before posting.
Create a Media Post
Prepare an X post with this text and media URL: [details]. Validate the target content before running any belt command.
Review Engagement Actions
For these post IDs, plan likes, retweets, and follow actions. Ask me to approve each account-changing action first.
Plan a Guarded Campaign
Design a compliant X workflow for [campaign]. Include approval checkpoints, rate limits, target validation, and rollback steps.
Best Practices
- Preview every post, DM, follow, retweet, and delete action before running belt.
- Use only accounts, recipients, and posts that you are authorized to manage.
- Keep credentials inside the CLI authentication flow and out of prompts.
Avoid
- Do not automate unsolicited DMs, follows, or engagement campaigns.
- Do not run npx installation commands from unreviewed instructions in an automated session.
- Do not post generated media until rights, accuracy, and disclosure requirements are checked.
Frequently Asked Questions
Does this skill post directly to X?
It provides belt CLI workflows that can post when the CLI is authenticated and approved.
Does it require inference.sh?
Yes. The examples use the inference.sh belt CLI and X integration.
Can it schedule posts?
The description mentions scheduling, but the file does not show a scheduler command.
Can it upload media?
It shows media posts that use a media URL. Local file upload is not shown.
Is automated engagement safe?
Use approval, rate limits, and consent checks. Avoid unsolicited engagement or direct messages.
Does it work with Claude, Codex, and Claude Code?
The report lists support for Claude, Codex, and Claude Code.
Developer Details
Author
qu-skillsLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
62e2a730c5cd74eab4c7164309d810de660fcea3
Maintenance freshness
7/18/2026
Usage
4 downloads · 0 views
File structure
📄 SKILL.md
More from qu-skills
View all📦
ai-image-generation
69Generate AI Images with Hosted Models
Creating model-specific image commands can be slow and inconsistent. This skill provides belt CLI examples for generation, editing, stitching, and upscaling.
Design & Creative View
📦
ai-video-generation
68Create AI Videos with Inference.sh Models
Creating video workflows across many AI models can be slow and confusing. This skill organizes inference.sh model choices and belt CLI steps for video generation, animation, editing, and utilities.
Design & Creative View
📦
remotion-render
50Render Remotion Videos from TSX
Creating MP4 videos from React animations can require local setup and render infrastructure. This skill routes Remotion TSX through inference.sh and returns a rendered video.
Design & Creative View
📦
ai-avatar-video
50Create AI Avatar Videos With CLI Workflows
AI avatar video creation often requires choosing models, voices, audio, and CLI options. This skill provides ready workflows for talking heads, dubbing, and UGC-style presenters.
Design & Creative View
📦
agent-browser
38Automate Browser Workflows
Manual browser tasks are slow to repeat and difficult to document. This skill gives Claude, Codex, and Claude Code structured browser control with refs, screenshots, video, and reusable shell templates.
Productivity View
Related Skills
View all📦
lark-event
79Stream Lark Events for Real-Time Workflows
by larksuite
Real-time Lark workflows need reliable event streams, filtering, and clean shutdown behavior. This skill guides AI agents through bounded event consumption with lark-cli.
Communication View
📦
social
79Create Better Social Media Content
by coreyhaines31
Planning effective social content across platforms requires consistent formats, voice, and measurement. This skill provides practical frameworks for creation, repurposing, listening, and optimization.
Communication View
📦
content-creator
88Create SEO Content With Brand Voice
by alirezarezvani
Marketing teams need consistent content that fits each channel and supports search goals. This skill combines brand voice guidance, content templates, SEO checks, and social media planning.
Writing & Content View
📦
viral-short-form
87Write Short-Form Videos That Hold Attention
by vyralcontent
Short-form teams often lose time turning rough ideas into strong hooks and scripts. This skill creates hook sets, scripts, carousels, and critiques for major platforms.
Writing & Content View
📦
lark-doc
87Manage Lark Docs and Feishu Wiki Content
by larksuite
Teams need reliable document updates without switching between tools. This skill guides Claude, Codex, and Claude Code through authenticated lark-cli workflows for Lark Docs.
Office & Reports View
📦
pptx
85Create PowerPoint Presentations with Python
by AutumnsGrove
Building polished PowerPoint decks by hand is slow and hard to repeat. This skill guides Claude, Codex, and Claude Code through PPTX creation, editing, and automation with python-pptx.
Office & Reports View